Comment Comment by tptacek This is a great post. I'm no expert, but for the nuts and bolts of differential and linear cryptanalysis (as the author points out, some modern attacks derive from these strategies), I got a lot out of the Howard Heys tutorial:http://www.cs.bc.edu/~straubin/crypto2017/heys.pdfIn particular, it's got good worked examples you can follow along with. parent tptacek 5 years ago
http://www.cs.bc.edu/~straubin/crypto2017/heys.pdf
In particular, it's got good worked examples you can follow along with.